Overview
This tool will help to remove the MyDoom.A and My.Doom.B worms from infected Windows XP and Windows 2000 systems. Once executed, after the EULA is accepted, the tool automatically checks for infection and removes the worm(s) if found. If a machine is infected with MyDoom.B, the tool will also provide the user with the default version of the "hosts" file and set the "read-only" attribute for that file. This action will allow the user to visit previously-blocked Microsoft and antivirus websites.
After execution, the tool pops-up a message describing the outcome of the detection/removal. The tool can be safely deleted after execution. Also, the tool creates a log file named doomcln.log in the %WINDIR%debug folder.
This tool will not:
- Detect/remove any viruses or worms besides MyDoom.A and MyDoom.B.
- Detect/remove future variants of MyDoom.
- Prevent the machine from being re-infected with MyDoom if, for example, an infected e-mail attachment is re-executed.
- Detect/remove malware that exists on a system as a result of the backdoor component created by MyDoom.A and MyDoom.B
- Delete any e-mail that contains MyDoom.A or MyDoom.B
- Work on any Windows NT 4.0 platform.